ISMS & Internal Control Lead — ISO 27001 | Flexible Schedule

Viva; Ciudad de México; Presencial; MXN 900.000 - 1.300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible schedule

Unlimited vacation from day one

Staff travel & flight benefits

Life & medical insurance

Descripción de la vacante

Viva is seeking an experienced SGSI Internal Control Manager to design, implement, and maintain the ISMS and related control frameworks, ensuring ISO/IEC 2700X compliance across IT, Finance, Compliance, Internal Audit, and Legal.

The role strengthens the second line of defense, supports regulatory compliance, and leads certification efforts (ISO 27001, 27005) while managing an internal ISMS team in a dynamic aviation environment.

Formación

• Bachelor's degree in Systems Engineering, Computer Science, Industrial Administration, or a related field.
• 7+ years of experience in information security, IT audit, or internal control.
• ISO/IEC 27001 Lead Auditor and CISA certifications.
• Desirable: CIA, CISM, CISSP, CRISC, or cloud security qualifications.
• Proven ability to implement and maintain ISO 27001.
• Experience in regulated industries (aviation, financial, telecoms, energy).
• Fluent written and spoken English and Spanish with strong communication skills.

Responsabilidades

• Define, document, and maintain ISMS policies, procedures, and controls aligned with ISO 2700X standards, ensuring continuous updates.
• Identify, assess, and prioritize information security risks with mitigation plans.
• Coordinate internal and external audits (ISO, ITGC, SOX).
• Collaborate with IT, Finance, Compliance, Internal Audit, and Legal for comprehensive security management.
• Lead certification processes (ISO 27001, ISO 27005) and ensure regulatory compliance.

Conocimientos

Information security

Audit management

Risk assessment

Team leadership

Policy & controls

Bilingual EN/ES

Educación

Bachelor's in IT / CS fields

Master's in Information Security (desirable)

Herramientas

SAP

Descripción del empleo

Viva is seeking an experienced SGSI Internal Control Manager to design, implement, and maintain the ISMS and related control frameworks, ensuring ISO/IEC 2700X compliance across IT, Finance, Compliance, Internal Audit, and Legal.

The role strengthens the second line of defense, supports regulatory compliance, and leads certification efforts (ISO 27001, 27005) while managing an internal ISMS team in a dynamic aviation environment.